Privacy Policy | dusk-rails

Last updated: January 2024

Introduction

dusk-rails Limited ("we", "our", "us") is committed to protecting the privacy of individuals who visit our website and interact with our services. This Privacy Policy explains how we collect, use, store, and share your personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We encourage you to read this policy carefully. By using our website or engaging with our services, you acknowledge that you have read and understood this policy.

Information We Collect

Information You Provide Directly

When you contact us or request information about our services, we may collect:

Your name and job title
Your organisation's name and address
Your email address
Details about your technology requirements or enquiry
Any other information you choose to share with us

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information:

Your IP address and approximate geographic location
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website address
Date and time of your visit

This information is collected through cookies and similar technologies. Please refer to our Cookies Policy for more details.

How We Use Your Information

We use the information we collect for the following purposes:

To respond to your enquiries and provide requested information
To deliver our consulting services under contract
To send you relevant updates about our services, where you have consented to receive them
To improve our website and user experience
To analyse website usage patterns and optimise our content
To comply with legal obligations and protect our legitimate interests

Legal Basis for Processing

Under UK data protection law, we must have a valid legal basis for processing your personal information. The legal bases we rely upon include:

Consent: Where you have given us clear permission to process your data for a specific purpose, such as receiving marketing communications.
Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights.
Legal obligation: Where processing is necessary to comply with a legal requirement.

Data Sharing

We do not sell your personal information to third parties. We may share your information with:

Service providers who assist us in operating our business, such as hosting providers and email services, under appropriate data processing agreements
Professional advisers, including lawyers and accountants, where necessary
Regulatory authorities or law enforcement agencies, where required by law

Any third parties with whom we share your data are obligated to handle it securely and only for the purposes we specify.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typically:

Enquiry data is retained for two years following our last interaction
Client data is retained for seven years following the end of our engagement, in line with professional and legal requirements
Website analytics data is retained for twenty-six months

When data is no longer needed, we securely delete or anonymise it.

Your Rights

Under UK data protection law, you have the following rights regarding your personal information:

Access: You can request a copy of the personal data we hold about you.
Rectification: You can ask us to correct inaccurate or incomplete data.
Erasure: You can request that we delete your data in certain circumstances.
Restriction: You can ask us to limit how we use your data.
Portability: You can request your data in a machine-readable format.
Objection: You can object to certain types of processing, including direct marketing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Access controls limiting who can view personal data
Regular security assessments and updates
Staff training on data protection responsibilities

While we take reasonable precautions, no method of transmission over the internet is entirely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

International Transfers

Your data is primarily stored and processed within the United Kingdom. If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

dusk-rails Limited
47 Chancery Lane
London WC2A 1PL
Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately. Visit dusk-rails.com for more information.